A security operations center wants to automate the collection of indicators of compromise (IOCs) from multiple threat intelligence sources and automatically update their SIEM with these IOCs. Which tool is specifically designed for this type of automation?

A network monitoring tool that displays real-time traffic graphs.

A vulnerability scanner that identifies missing patches on servers.

A SOAR platform that integrates with threat intelligence feeds and SIEM APIs.

A password manager that stores credentials securely.

A security team writes a script to automatically block IP addresses that trigger multiple failed login attempts. What is a key benefit of this approach?

It eliminates the need for monitoring login attempts

It guarantees that no legitimate user will ever be locked out

It reduces the time required to respond to a potential brute-force attack

It removes the need for any other security controls

How does automation typically integrate with existing security infrastructure?

By using APIs to connect and interact with existing tools

By isolating security tools from each other

By requiring all security tools to be manually operated

By replacing all existing security tools with new ones

A security analyst writes a script to automatically block IP addresses that trigger multiple failed login attempts. The script works well initially, but after a few months, it starts blocking legitimate users. What is the most likely cause?

The script is using an outdated list of malicious IP addresses.

The script's threshold for blocking is too low and needs to be adjusted based on changing user behavior.

The script is not being run frequently enough.

The script is not compatible with the latest operating system updates.

CompTIASecurity+

Domain 4Objective 7

Automation and Orchestration SY0-701 Practice Questions (Page 6)

Part of the Security operations domain, which accounts for 28% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

28%of the exam

Questions 26–30

26application · medium
A security operations center wants to automate the collection of indicators of compromise (IOCs) from multiple threat intelligence sources and automatically update their SIEM with these IOCs. Which tool is specifically designed for this type of automation?
Select an answer first
27foundation · easy
Which of the following is an example of a security automation tool that uses a graphical interface to build workflows?
Select an answer first
28foundation · easy
A security team writes a script to automatically block IP addresses that trigger multiple failed login attempts. What is a key benefit of this approach?
Select an answer first
29foundation · easy
How does automation typically integrate with existing security infrastructure?
Select an answer first
30application · medium
A security analyst writes a script to automatically block IP addresses that trigger multiple failed login attempts. The script works well initially, but after a few months, it starts blocking legitimate users. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.